$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vxagE2yQ0SphC9rCHwI7N6EUCyo.roa File: vxagE2yQ0SphC9rCHwI7N6EUCyo.roa (raw, json) Hash identifier: iQ6XkHUl3ffx7ncKsk1LzBpaKpZMdsdHkg9o4WcB79I= Subject key identifier: BF:16:A0:13:6C:90:D1:2A:61:0B:DA:C2:1F:02:3B:37:A1:14:0B:2A Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11EE Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vxagE2yQ0SphC9rCHwI7N6EUCyo.roa Signing time: Mon 26 Aug 2024 05:18:05 +0000 ROA not before: Mon 26 Aug 2024 05:18:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 198949 IP address blocks: 210.242.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4590 (0x11ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:18:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BF16A0136C90D12A610BDAC21F023B37A1140B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:ed:17:a9:94:88:b4:60:10:c8:18:af:7c: 8b:cc:89:9b:90:dc:8b:6f:35:1d:e4:23:67:74:7a: d2:a7:fb:05:14:40:9a:71:ec:92:ee:8c:d4:cd:3c: 49:75:66:64:d8:d8:0a:68:14:de:f6:90:ea:75:51: 40:41:a7:80:7c:45:52:80:3d:84:15:05:58:c8:86: a2:b4:d5:e6:e7:fd:39:ed:58:19:0a:11:2c:e6:6b: 3a:c4:1e:af:0f:0f:57:c0:19:8c:55:57:dd:f2:d8: 69:9b:69:c5:7a:e6:51:ae:7a:88:8e:f9:6f:76:c2: 84:a6:d5:f0:4c:c9:52:ac:b2:a3:48:2e:ae:83:da: 84:27:ba:e6:a9:72:4d:ef:bc:1e:53:3e:0f:a1:3a: 4b:f0:33:91:9d:99:03:f0:da:90:fe:d5:2e:fa:87: 68:5f:37:f4:f4:99:48:0e:06:21:62:5a:39:fc:73: 73:ee:b4:fc:40:07:5f:70:31:67:79:2d:bf:23:24: ae:45:fb:e1:8a:93:91:dd:6d:99:35:bc:bc:0c:82: 35:ab:58:85:c6:e7:22:e9:2d:3c:9f:b7:df:cf:14: cc:c1:89:73:c3:7d:24:ef:94:f3:70:1c:64:68:5f: 72:bb:81:ff:67:2c:0c:75:08:79:6c:47:6c:aa:48: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:16:A0:13:6C:90:D1:2A:61:0B:DA:C2:1F:02:3B:37:A1:14:0B:2A X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vxagE2yQ0SphC9rCHwI7N6EUCyo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.242.83.0/24 Signature Algorithm: sha256WithRSAEncryption 22:32:fc:13:c2:5b:62:d3:18:8b:f2:ef:18:a5:fc:06:3b:76: 71:5a:70:27:92:1e:d5:d4:da:e6:9f:09:b7:7e:46:c7:80:0d: 0c:84:ca:d0:57:b0:9f:9a:6a:50:81:bf:26:ce:16:9e:22:f7: 46:3c:35:e4:15:ee:a5:db:f6:ca:ec:8b:7c:28:05:2a:46:24: 3a:f9:99:c2:8d:bc:fa:91:68:94:e8:cb:b3:dc:45:bb:0c:11: 38:04:b9:28:0f:b3:a3:3c:56:e9:47:43:ea:0b:95:50:cf:5b: 27:05:28:0b:e5:d8:aa:d9:a2:f9:9b:bb:4a:ec:5d:f1:40:de: ed:25:fa:72:c2:85:be:a0:12:06:9f:b0:95:df:8b:5d:02:6d: f1:22:df:35:8a:64:eb:fc:f6:04:e3:88:6b:74:7b:5d:74:41: 0a:dc:1e:b8:da:4a:13:60:15:ef:d9:f7:74:6c:7f:4d:de:f4: ce:d7:b6:21:08:ed:87:d0:29:1d:2b:6f:43:8d:ba:3c:21:7b: b2:ed:44:0b:9d:a4:7f:31:1a:93:cd:37:44:79:0f:60:da:2f: 6b:bc:9a:8d:e8:1a:6a:bf:c6:b6:b1:a1:21:8b:2a:92:d4:9b: c4:88:f2:62:1d:67:51:ae:ef:6f:3f:1d:c0:10:fb:01:8f:a4: ad:13:2a:29 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE4MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGMTZBMDEzNkM5MEQx MkE2MTBCREFDMjFGMDIzQjM3QTExNDBCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCni+0XqZSItGAQyBivfIvMiZuQ3ItvNR3kI2d0etKn+wUUQJpx 7JLujNTNPEl1ZmTY2ApoFN72kOp1UUBBp4B8RVKAPYQVBVjIhqK01ebn/TntWBkK ESzmazrEHq8PD1fAGYxVV93y2GmbacV65lGueoiO+W92woSm1fBMyVKssqNILq6D 2oQnuuapck3vvB5TPg+hOkvwM5GdmQPw2pD+1S76h2hfN/T0mUgOBiFiWjn8c3Pu tPxAB19wMWd5Lb8jJK5F++GKk5HdbZk1vLwMgjWrWIXG5yLpLTyft9/PFMzBiXPD fSTvlPNwHGRoX3K7gf9nLAx1CHlsR2yqSNapAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUvxagE2yQ0SphC9rCHwI7N6EUCyowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC92eGFnRTJ5UTBTcGhDOXJDSHdJ N042RVVDeW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJT MA0GCSqGSIb3DQEBCwUAA4IBAQAiMvwTwlti0xiL8u8YpfwGO3ZxWnAnkh7V1Nrm nwm3fkbHgA0MhMrQV7CfmmpQgb8mzhaeIvdGPDXkFe6l2/bK7It8KAUqRiQ6+ZnC jbz6kWiU6Muz3EW7DBE4BLkoD7OjPFbpR0PqC5VQz1snBSgL5diq2aL5m7tK7F3x QN7tJfpywoW+oBIGn7CV34tdAm3xIt81imTr/PYE44hrdHtddEEK3B642koTYBXv 2fd0bH9N3vTO17YhCO2H0CkdK29Djbo8IXuy7UQLnaR/MRqTzTdEeQ9g2i9rvJqN 6Bpqv8a2saEhiyqS1JvEiPJiHWdRru9vPx3AEPsBj6StEyop -----END CERTIFICATE-----Generated at Fri Nov 22 02:44:26 2024 by rpki-client on console-fra.rpki-client.org